Find Computers with Unexpected Reboot Events
Unexpected reboots can be a clear indication of issues with that computer or server. Having an overview of the number of times unexpected reboots have occurred is therefore critical to identify assets with frequent issues. With this chart report, you can have a quick overview of the number of unexpected reboots detected in the last 90 days right on your dashboard so you always have the information available at a glance. Below you can find an example of one of the chart types that can be used in the chart report widget.
Unexpected Reboots Chart Query
Select Distinct Top 1000000 tblAssets.AssetName, Count(tblNtlog.TimeGenerated) As Instances From tblAssets Inner Join tblNtlog On tblAssets.AssetID = tblNtlog.AssetID Inner Join tblNtlogSource On tblNtlogSource.SourcenameID = tblNtlog.SourcenameID Inner Join tblNtlogMessage On tblNtlogMessage.MessageID = tblNtlog.MessageID Where tblNtlog.TimeGenerated > GetDate() - 90 And tblNtlogSource.Sourcename = 'Microsoft-Windows-Kernel-Power' And tblNtlog.Eventcode = 41 Group By tblAssets.AssetName